$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/1E018994AEBF11E993F33C65C4F9AE02.roa File: 1E018994AEBF11E993F33C65C4F9AE02.roa (raw, json) Hash identifier: AKm1JqCczG2DSLc1nVeyEHprQmVWftF9AF7IXyfGtOY= Subject key identifier: D5:8B:3C:B5:B4:50:7B:D2:E8:4E:EF:9A:A2:FF:D2:77:60:ED:46:1F Certificate issuer: /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Certificate serial: 0E8C Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/1E018994AEBF11E993F33C65C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:21:22 +0000 ROA not before: Fri 14 Feb 2025 18:37:11 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 63526 IP address blocks: 103.106.236.0/22 maxlen: 22 103.106.236.0/23 maxlen: 23 103.106.236.0/24 maxlen: 24 103.106.237.0/24 maxlen: 24 103.106.238.0/23 maxlen: 23 103.106.238.0/24 maxlen: 24 103.106.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3724 (0xe8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4294, serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Validity Not Before: Feb 14 18:37:11 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=69a40512-cc5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d8:c4:3e:6e:59:6b:fa:00:bf:8d:57:91:89: e4:9f:e1:b4:fb:a5:b8:57:9c:5c:26:9a:ce:96:f2: 96:88:3c:f4:75:f2:61:29:37:b9:e7:77:05:06:51: e5:34:4e:bd:c2:b3:9d:9d:89:16:bc:19:18:c1:c2: 3b:4f:3e:fe:9f:40:a9:29:be:2b:60:08:84:6e:5e: e7:9f:c2:03:b8:7d:e0:29:4b:3f:de:59:98:4b:c4: e4:b1:78:07:73:21:43:1c:e2:5a:d8:c6:ca:8c:78: 50:24:89:d0:8d:f0:15:44:f2:d8:58:15:7f:85:12: 41:1b:65:b8:1a:36:15:e8:56:a7:4a:9b:82:8d:bf: 2f:8c:dd:d4:71:8e:89:3a:ec:16:a3:19:ee:ce:cb: 31:9b:11:1e:66:56:fc:18:64:3c:7a:9f:61:0b:8b: 28:a7:99:5c:7f:1b:17:e6:71:3a:84:80:95:15:f4: 93:a2:69:a6:1a:3d:98:89:76:09:56:cb:06:b7:b7: 95:f0:92:4f:d4:0b:5b:b3:52:72:c0:fd:47:b3:8d: 1f:5d:78:e7:7a:99:23:88:ff:6d:76:2a:41:d6:8b: 78:c3:17:98:54:4d:e6:d9:78:02:8a:03:11:ae:2e: 6a:5b:7c:ca:f8:10:88:43:99:fc:e2:7b:89:b9:3d: e4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8B:3C:B5:B4:50:7B:D2:E8:4E:EF:9A:A2:FF:D2:77:60:ED:46:1F X509v3 Authority Key Identifier: keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/1E018994AEBF11E993F33C65C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.106.236.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:b3:48:c4:0c:e9:b4:41:ad:94:1f:52:74:48:dd:89:d1:23: 2f:66:f8:75:16:d5:1c:86:d3:66:c7:fa:a1:a4:2c:aa:0c:dc: eb:52:52:6d:98:7c:4a:03:1c:98:44:29:e4:5f:4e:dd:61:1b: f1:81:3c:64:eb:a3:fd:28:96:99:18:51:01:04:ef:68:0c:3e: 04:2d:94:39:ba:f8:76:bb:c7:b3:bd:f8:6a:1b:cb:d0:06:43: 2e:2c:81:88:1f:6c:5f:e5:5f:d6:79:ca:12:b8:f6:d0:38:2e: 85:94:d0:35:2e:b1:52:d8:9f:fa:af:ac:8f:7a:df:75:0e:3b: ec:1e:1d:5f:88:5b:e2:06:20:5f:54:a7:a3:ec:36:7e:47:46: c1:7c:5e:e2:6b:4b:6b:6a:67:8d:d7:6a:6d:0a:8b:62:13:db: a0:04:23:6d:60:dd:80:fb:f7:e1:24:26:97:26:2c:fc:ff:1c: 26:c6:d0:35:ac:9d:4f:c5:06:a3:7a:00:15:46:d4:a6:83:65: 7d:0e:87:53:a6:34:09:cd:9a:0f:d2:87:85:b6:9d:22:84:9b: 49:60:48:84:1f:6c:0c:59:fe:96:48:5a:13:14:66:f6:ef:8a: 03:f7:57:80:df:5c:06:41:89:13:a0:ec:83:ad:ab:56:0b:20: 41:98:31:7d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOTQxMTAvBgNVBAUTKDYzNUY1NzlDRTA1NTk3MEUwMUExQzNCNzc1MDIxQzhF M0UyMjc4ODcwHhcNMjUwMjE0MTgzNzExWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDUxMi1jYzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtjEPm5Za/oAv41XkYnkn+G0+6W4V5xcJprOlvKWiDz0dfJhKTe553cFBlHl NE69wrOdnYkWvBkYwcI7Tz7+n0CpKb4rYAiEbl7nn8IDuH3gKUs/3lmYS8TksXgH cyFDHOJa2MbKjHhQJInQjfAVRPLYWBV/hRJBG2W4GjYV6FanSpuCjb8vjN3UcY6J OuwWoxnuzssxmxEeZlb8GGQ8ep9hC4sop5lcfxsX5nE6hICVFfSTommmGj2YiXYJ VssGt7eV8JJP1Atbs1JywP1Hs40fXXjnepkjiP9tdipB1ot4wxeYVE3m2XgCigMR ri5qW3zK+BCIQ5n84nuJuT3kDQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNWLPLW0 UHvS6E7vmqL/0ndg7UYfMB8GA1UdIwQYMBaAFGNfV5zgVZcOAaHDt3UCHI4+IniH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI5NC8wQ0I1RUFGQUFF QkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3NEJvY08zZFFJY2pqNGll SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxOVhuT0JWbHc0Qm9jTzNkUUljamo0aWVJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQyOTQvMENCNUVBRkFBRUJFMTFFOTgwRkI0RTYzQzRGOUFFMDIvMUUwMTg5OTRB RUJGMTFFOTkzRjMzQzY1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ2rsMA0GCSqGSIb3DQEBCwUAA4IBAQAvs0jEDOm0Qa2UH1J0SN2J 0SMvZvh1FtUchtNmx/qhpCyqDNzrUlJtmHxKAxyYRCnkX07dYRvxgTxk66P9KJaZ GFEBBO9oDD4ELZQ5uvh2u8ezvfhqG8vQBkMuLIGIH2xf5V/WecoSuPbQOC6FlNA1 LrFS2J/6r6yPet91DjvsHh1fiFviBiBfVKej7DZ+R0bBfF7ia0trameN12ptCoti E9ugBCNtYN2A+/fhJCaXJiz8/xwmxtA1rJ1PxQajegAVRtSmg2V9DodTpjQJzZoP 0oeFtp0ihJtJYEiEH2wMWf6WSFoTFGb274oD91eA31wGQYkToOyDratWCyBBmDF9 -----END CERTIFICATE-----Generated at Mon Mar 2 09:45:59 2026 by rpki-client